EUVD-2013-3195

Malware in sbrugna...

CVE-2013-3258

Cross-site request forgery CSRF vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via unspecified vectors...

CVE-2013-3258

The CVE concerns the Digg Digg WordPress plugin (versions before 5.3.5). A Cross‑Site Request Forgery (CSRF) vulnerability could allow an attacker to hijack a user’s authenticated session and cause authenticated requests that modify plugin settings via unspecified vectors. The root cause details ...

WordPress Digg Digg Plugin <= 5.3.4 - CSRF

Because of this vulnerability, the attackers can hijack the authentication of users for requests that modify settings via unspecified vectors. Solution Update the plugin...